Note: The job is a remote job and is open to candidates in USA. Piper Companies is seeking a Common Criteria / FIPS Security Engineer to support the design, development, validation, and certification of security-focused products under the Common Criteria (CC) and FIPS 140 frameworks. This role will be responsible for partnering with engineering teams to ensure products meet security certification requirements, regulatory standards, and compliance obligations throughout the development lifecycle.
Responsibilities
- Partner with engineering teams to design and develop products that meet Common Criteria and FIPS certification requirements
- Support Common Criteria certification efforts, including Security Target (ST) development, evidence collection, and certification documentation
- Assist with FIPS 140 validation activities related to cryptographic modules, libraries, and security functions
- Review product architectures, security controls, and technical documentation for certification readiness
- Translate certification and compliance requirements into engineering tasks, testing activities, and product requirements
- Evaluate products against regulatory, security, and certification standards to ensure compliance
- Support threat modeling, security design reviews, vulnerability assessments, and remediation planning
- Collaborate with Common Criteria evaluation labs, FIPS testing laboratories, product managers, and security teams throughout certification projects
- Assist with addressing findings identified during certification and validation assessments
- Support certification maintenance, recertification efforts, and evolving regulatory compliance requirements
- Develop detailed technical documentation, reports, and written communications for internal and external stakeholders
- Contribute to Secure Development Lifecycle (SDLC) processes and security best practices across product teams
Skills
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Technology, or a related field
- 3+ years of experience in security engineering, systems engineering, software engineering, product security, compliance, or a related technical discipline
- Experience supporting regulatory compliance, certification programs, audit activities, or security assessment initiatives
- Understanding of secure software development practices and security architecture principles
- Ability to interpret technical requirements and evaluate products against defined compliance standards
- Experience reviewing code, configurations, and technical designs to assess alignment with certification requirements
- Strong written communication and technical documentation skills
- Ability to work independently while collaborating with senior engineers and cross-functional teams
- Experience with Common Criteria (ISO/IEC 15408) certification programs
- Familiarity with Security Targets (STs)
- Familiarity with Protection Profiles (PPs)
- Familiarity with Evaluation Assurance Levels (EALs)
- Familiarity with EUCC or SOG-IS frameworks
- Experience supporting FIPS 140 validation efforts involving cryptographic modules and libraries
- Experience testing products against compliance and certification requirements
- Experience working with Cisco networking, security, or router products
- Experience within government, defense, telecommunications, or other regulated industries
- Industry certifications such as CISSP, CCSP, Security+, or equivalent
- Experience working directly with third-party testing laboratories and certification bodies
Benefits
- Fully remote opportunity for candidates located on the U.S. East Coast.
- Comprehensive benefits package including medical, dental, vision, and sick leave as required by law.
- Opportunity to work on high-impact security certification and compliance initiatives.
- Collaborative team environment with mentorship from senior security and compliance professionals.
Company Overview